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WHAT IS CLAIMED IS: 

1 . A method for enabling a network between a first processor and a 
second processor using at least one additional processor separate from the first 
processor and the second processor, wherein the first processor and the second 
processor are each identifiable by a name, the method comprising the steps of: 

providing, by the at least one additional processor, a set of names that 
includes the name of the second processor; 

receiving, at the at least one additional processor, information indicating on 
behalf of the first processor a first selection including one or more of the names in the 
set of names that includes the name of the second processor; 

providing, by the at least one additional processor, a set of names that 
includes the name of the first processor; 

receiving, at the at least one additional processor, information indicating on 
behalf of the second processor a second selection including one or more of the 
names in the set of names that includes the name of the first processor; 

determining a first virtual address for the first processor and a second virtual 
address for the second processor such that the first and second virtual addresses 
uniquely identify the first and second processors, respectively, and are routable 
through the network; and 

providing, by the at least one additional processor, to the first processor the 
second virtual address and to the second processor the first virtual address to enable 
one or more tunnels between the first and the second processors when the at least 
one additional processor determines that the first selection on behalf of the first 
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processor includes the name of the second processor and the second selection on 
behalf of the second processor includes the name of the first processor. 

2. The method of claim 1 , further comprising the step of: 
establishing, by the first processor, one or more tunnels from the first 

processor to the second processor using the first and second virtual addresses. 

3. The method of claim 2, wherein the step of establishing, by the first 
processor, one or more tunnels from the first processor to the second processor 
comprises the step of: 

establishing, by the first processor, one or more tunnels through a base 
network from the first processor to the second processor using the first and second 
virtual addresses. 

4. The method of claim 3, wherein the step of establishing, by the first 
processor, one or more tunnels through a base network from the first processor to 
the second processor comprises the step of: 

establishing, by the first processor, one or more tunnels through an Internet 
from the first processor to the second processor using the first and second virtual 
addresses. 
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5. The method of claim 1 , wherein the step of providing, by the at least 
one additional processor, to the first processor the second virtual address and to the 
second processor the first virtual address comprises the step of: 

providing, by the at least one additional processor, to the first processor the 
second virtual address when the first processor is determined to be authorized to 
receive the second virtual address. 

6. The method of claim 1 , wherein each of the names includes a first 
portion and a second portion. 

7. The method of claim 1 , further comprising the steps of: 
establishing a tunnel between the first processor and the at least one 

additional processor for communications between the first processor and the at least 
one additional processor. 

8. The method of claim 7, wherein the step of receiving, at the at least one 
additional processor, information indicating on behalf of the first processor a first 
selection, comprises the step of: 

receiving, at the at least one additional processor, the first selection through 
the tunnel established between the first processor and the at least one additional 
processor. 
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9. A system for enabling a network between a first processor and a 
second processor each identifiable by a name, the system comprising: 

means for providing a set of names that includes the name of the second 
processor; 

means for receiving information indicating on behalf of the first processor a 
first selection including one or more of the names in the set of names that includes 
the name of the second processor; 

means for providing a set of names that includes the name of the first 
processor; 

means for receiving information indicating on behalf of the second processor a 
second selection including one or more of the names in the set of names that 
includes the name of the first processor; 

means for determining a first virtual address for the first processor and a 
second virtual address for the second processor such that the first and second virtual 
addresses uniquely identify the first and second processors, respectively, and are 
routable through the network; and 

means for providing to the first processor the second virtual address and to the 
second processor the first virtual address to enable one or more tunnels between the 
first and the second processors when the at least one additional processor 
determines that the first selection on behalf of the first processor includes the name 
of the second processor and the second selection on behalf of the second processor 
includes the name of the first processor. 
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10. A system for enabling a network between a first processor and a 
second processor, wherein the first and second processors are separate from said 
system and are each identifiable by a name, said system comprising: 

a tunneling interface that provides a set of names that includes the name of 
the second processor, receives information indicating a consent on behalf of the first 
processor to enabling a tunnel between the first processor and the second processor, 
provides a set of names that includes the name of the first processor, and receives 
information indicating a consent on behalf of the second processor to enabling a 
tunnel between the second processor and the first processor; and 

a controller that determines a first virtual address for the first processor and a 
second virtual address for the second processor such that the first and second virtual 
addresses uniquely identify the first and second processors, respectively, and are 
routable through the network, and provides to each of the first and second 
processors the first and second virtual addresses to enable one or more tunnels 
between the first and the second processors, when the controller determines that the 
first selection on behalf of the first processor includes the name of the second 
processor and the second selection on behalf of the second processor includes the 
name of the first processor. 

11. A method for enabling a network between a first processor and a 
second processor using at least one additional processor separate from the first 
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processor and the second processor, wherein the first processor and the second 
processor are each identifiable by a name, the method comprising the steps of: 

receiving, at the at least one additional processor, information indicating a 
consent on behalf of the first processor and second processor to enabling a tunnel 
between the first and the second processor; 

determining a first virtual address for the first processor and a second virtual 
address for the second processor such that the first and second virtual addresses 
uniquely identify the first and second processors, respectively, and are routable 

through the network; and 

providing, by the at least one additional processor, to the first processor the 
second virtual address and to the second processor the first virtual address to enable 
one or more tunnels between the first and the second processors when the at least 
one additional processor determines that the first selection on behalf of the first 
processor includes the name of the second processor and the second selection on 
behalf of the second processor includes the name of the first processor. 

12. The method of claim 1 1 , further comprising the steps of: 

displaying, by a processor separate from the at least one additional 

processor, an object representing the first processor and an object representing the 

second processor; and 

the administrator moving the displayed object representing the first 

processor and placing the object representing the first processor on the displayed 

object representing the second processor in order to indicate consent on behalf of 



155 



Attorney Docket No: 07937-0002-01000 

the first processor and the second processor to enable a tunnel between the first 
processor and the second processor. 
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